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TELEMETRY SYSTEM WITH AUTHENTICATION 



CROSS-REFERENCE TO RELATED APPLICATIONS 



This application claims the benefit, and is a continuation-in-part of, U.S. application Ser. No. 
5 09/057,859, filed on April 9, 1998, and entitled "Frequency Hopping System for Intermittent Transmission 
with Receiver Using Individual Tracking, FFT, and Authentication". 



The present invention relates to telemetry in general, and, more particularly, to a system in which 
10 a plurality of transmitters intermittently transmit short messages indicative of status of sensors associated 
with the transmitters, to a method of synchronization suitable for using frequency hopping carrier in such 
systems, and to a method of authentication of the received messages. 



detectors, environmental monitoring, etc.) comprise many transmitters that periodically or sporadically 
transmit messages to one or more receivers. In these systems, the transmitters are located at diflFerent 
places and transmit messages that are indicative of the status of monitoring sensors to a receiver that 
collects the data from all of the sensors. Normally, the transmitters transmit messages that are as short as 
20 feasible and with the interval between the transmissions as long as feasible. This is advantageous for two 
reasons. First, it minimizes the average current drain in the transmitters, which are typically battery 
operated. Second, short and infrequent transmissions lower the probability that the data is lost due to 
collisions that occur when two or more transmitters transmit at the same time. However, if an alarm 
occurs, the associated transmitter transmits immediately in order to convey the alarm message with little 



Typically, such systems transmit data at a single frequency, and thus are susceptible to 
interference and signal loss due to phenomena known as "multipath fading." Consequently, the reliability 
of such systems is compromised or, conversely, the transmitted power has to be increased to overcome 
the fading, which results in larger power drain and shorter battery life. Besides, there usually are 
30 regulatory limits that restrict such transmitter power and thus limit the possible compensation by sheer 
increase of power. Since the multipath effect is highly sensitive to the frequency of the transmitted 
carrier, a system using multiple frequencies (e.g., a frequency hopping spread spectrum system, etc.) has 



FIELD OF THE INVENTION 



BACKGROUND OF THE INVENTION 



15 



Some wireless telemetry systems (e.g., burglar alarms, fire alarms, power utility meters, leak 



25 delay. 
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a potential to eliminate these drawbacks. However, frequency hopping systems require a long acquisition 
time and they are typically used in two way communication applications in which all the devices are 
continuously synchronizing with one master device or with each other using a variety of synchronization 
methods as shown in some references. In other cases, to ease the synchronization problem, there are 
5 employed receivers that can simultaneously receive signals at many frequencies by making the receiver 
broadband or by using several receivers at the same time. Generally, those solutions suffer from 
performance degradation or high cost or both, which makes them undesirable for low cost applications 
that require high reliability such as security systems and some telemetry systems. 

A serious problem that must be addressed in battery operated systems is to shorten the 

10 transmission time as much as possible by making the message preamble as short as possible in order to 
conserve the battery power. Therefore, the synchronization of the receiver with the transmitters is a 
difficult task. This problem is exacerbated in some systems such as security alarms that require some 
messages to be conveyed to the system without waiting for the scheduled transmission time. A related 
problem, in battery operated systems, is limitation of the transmitted power to conserve the battery 

1 5 power. 

Many telemetry systems need to be protected from tampering with telemetry data. For example, 
in a security system, an intruder may attempt to gain access by spoofing the system with false transmissions. 
It is therefore important to provide for authentication of the transmissions. Similarly, some telemetry 
systems need to protect data from eves dropping, thus requiring encryption to protect the transmitted data. 

20 

SUMMARY OF THE INVENTION 

Some embodiments of the present invention comprise a frequency hopping receiver that rapidly 
acquires and maintains synchronization with a plurality of intermittently transmitting frequency hopping 
transmitters, which enables the transmitters to omit the transmission of long preambles. This is 

25 advantageous because it lowers the average current drain in the transmitters and, consequently, lengthens 
their battery life. Furthermore, some embodiments of the present invention are advantageous in that they 
provide improved reliability in the presence of multipath fading, interference and jamming. Still 
furthermore, some embodiments of the present invention are capable of eliminating the effect of 
persistent collisions that occur when two or more transmitters transmit at the same time in the same 

30 channel for a prolonged period. And still furthermore, some embodiments of the present invention 

provide for protection of the transmissions from eves dropping and for authentication, i.e. for verification 
if received messages are valid and were sent from a valid transmitter. 
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The illustrative embodiment of the present invention is a frequency-hopping wireless telemetry 
system comprising: (1) one or more receivers, and (2) one or more transmitters, each of which receive 
input from one or more sensors. The transmitters intermittently transmit very short messages indicative 
of status of the sensors associated with the transmitters. Each transmitter includes a time interval 
5 generator to establish the time interval between successive transmissions, a frequency 

synthesizer-modulator to generate a modulated radio frequency carrier signal wherein the frequency of 
the carrier changes in response to programming the synthesizer by digital data, a reference frequency 
oscillator to provide a frequency reference from which the synthesizer derives carrier frequencies and, 
advantageously, from which the time interval generator derives its timing, and a transmitter control logic 
1 0 activated in response to pulses from the time interval generator or a sensor signal indicating an abnormal 
condition. When activated, the transmitter control logic activates and programs the synthesizer so that 
the transmitter carrier frequency is changed according to a frequency hopping algorithm, provides digital 
Ci data indicative of the sensor status and advantageously battery status, and modulates the carrier with the 

provided data. The receiver includes at least one frequency selective radio receiver circuit, 
^r' 1 5 programmable by digital data, to receive and demodulate a transmitted carrier when the frequency of the 
U receiver circuit is programmed according to the frequency of the carrier, and a receiver control logic to 

process demodulated data, to provide system interface responsive to the received messages, and to 
1=^ program the frequency of the frequency selective receiver circuit. The receiver also includes a means to 

LH digitize the received signal within the entire band of interest, and a Fast Fourier Transform (FFT) means to 

□ 20 transform the sampled signal to produce a plurality of outputs indicative of the power of the frequency 
y components present in the sampled signal. In the illustrative embodiment, the frequency selective radio 

receiver circuit comprises a frequency converter followed by a low pass filter and a data demodulator to 
process the transmission frequency channel selected by the frequency converter and to demodulate the 
received signal. The frequency converter is tuned to a selected transmission frequency channel by the 
25 control logic, in part, in response to the processing of the FFT outputs. The control logic includes a 
receiver timer to measure the elapsing time, and a plurality of memory registers to hold digital data 
indicative of (a) the time of the next transmission occurrence for each transmitter and (b) the frequency 
of the next transmission occurrence for each transmitter. In operation, the control logic sequentially 
compares the data content of the time registers with the data content of the timer and if the transmission 
30 is due from a transmitter, the control logic programs the frequency selective radio receiver circuit 
according to the data content in the frequency register associated with said transmitter, attempts to 
decode the demodulated signal, modifies the content of the time register by a number representative of 
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the time interval between the successive transmissions for said transmitter and modifies the content of 
the frequency register according to a predetermined algorithm for said transmitter. This way, a robust 
operation is obtained: the FFT circuit operating as a multi-channel received signal strength indicator 
(RSSI) speeds up the acquisition, the controller with its frequency and time registers provides for 
5 individual tracking of all the transmitters. In combination, the two mechanisms provide for a very robust 
operation. 

In accordance with the illustrative embodiment of the present invention there is provided a 
method of transmission in the system so as to improve reliability of the system in the presence of 
multipath fading and interference, the method is based on varying the transmission frequency for each 

10 transmitted message and varying the time between consecutive messages. The frequency variations 
provide frequency diversity and are effective against multipath fading as well as single of multiple 
narrowband interference. The time variations are effective against periodic impulse interference. In 
combination, the frequency and time variations provide immunity for a wide variety of signal 
impairments and interference including multipath fading, wide and narrowband interference, impulse 

1 5 noise and deliberate jamming. 

In accordance with the illustrative embodiment of the present invention there is provided a 
method of minimizing the effect of collisions, the method is based on selecting the transmission 
frequencies in sequences that are different for each transmitter, wherein transmitter frequency sequence 
depends on the transmitter ID number or other number derived or associated with the transmitter ID. In 

20 addition, in the illustrative embodiment, the transmitter ID number or other number derived or associated 
with the transmitter number is included in the transmitted message, so that, upon reception of a single 
message from a transmitter, the receiver can determine what is the next frequency for this transmitter, and 
thus achieve synchronization with this transmitter. 

In accordance with the illustrative embodiment of the present invention there is provided another 

25 method of minimizing the effect of collisions that can be used alone or in conjunction with previously 
described minimizing of collisions. The method comprises randomizing the time interval between 
transmissions individually for each transmitter and a receiver compensating for the time interval changes. 

In accordance with the illustrative embodiment of the present invention there is provided a 
simple method to generate a very large number of frequency-time hopping sequences. The method 

30 produces sequences that are orthogonal, thus eliminates possibility of persistent collisions even when 
large number of transmitters are used. In addition, the method requires identical circuit in each 
transmitter and the actual sequence that is produced is selected by the transmitter ID or other number 
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associated with the transmitter ID, thus making it convenient for manufacturing. Also, the method 
enables to produce a very large number of frequency-time sequences based on a single short PN 
generator whose state can be instantly recovered by a receiver based on just one received transmission, 
thus aiding the receiver in obtaining synchronization with a transmitter whose ID is known. At the same 
5 time, because of a very large number of possible sequences that can be generated, it is difficuh to obtain 
synchronization if the transmitter ID is not known, which makes the system immune to interception and 
jamming. 

In accordance with the illustrative embodiment of the present invention there is provided a 
method that enables such a system to authenticate the received transmissions. The method comprises 

10 discriminating the received transmissions based on an expected and actual transmission frequency and 
time. In addition, the transmitted data is encrypted for each transmission wherein the encryption key is 
changed for each transmission. Alternatively or in conjunction with the variable encryption key, the 
transmitted data is modified, prior to the encryption, by a modifier. The variable encryption key and the 
modifier are derived based on the frequency and time hopping algorithm and can be derived in the 

1 5 receiver without overhead data in the transmissions. The encryption key and/or the modifier are varied 
according to a sequence that is individually selected by each transmitter based on the transmitter ID code, 
and is different for each transmitter. 

BRIEF DESCRIPTION OF DRAWINGS 
20 FIG. 1 is a block diagram of an example of an illustrative embodiment of a telemetry frequency 

hopping system including many transmitters and a receiver. 

FIG. 2 is a block diagram of a transmitter according to an advantageous embodiment of the present 
invention. 

FIG. 3 is a block diagram of an example of an illustrative embodiment of a sequence generator used 
25 to determine the individual frequency (or time) sequences. 

FIG. 4 is a block diagram of an example of an illustrative embodiment of a sequence generator used 
to determine the individual frequency-time sequences. 

FIG. 5 is a block diagram of a receiver according to an advantageous embodiment of the present 
invention. 

30 FIG, 6 is a block diagram of an example of an illustrative embodiment of a controller including 

hopping tracking mechanism. 

FIG. 7 is block diagram of an example of an illustrative embodiment of a authentication process. 
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DETAILED DESCRIPTION 

Referring to FIG. 1, the frequency hopping system includes a telemetry collection unit 104 and a 
5 plurality of remote telemetry transmitters (transmitters) 102-1, 102-2, 102-3 and 102-4. The telemetry 
collection unit includes a telemetry collection receiver (receiver) 101, and a computer 103 that can 
communicate the telemetry over system interface 120. The receiver 101 includes a receiver interface 110 
through which the receiver can be connected, locally or remotely, to a variety of interface equipment, a 
controller, or a computer. Each remote telemetry transmitter includes an interface or a sensor or an 
10 operation to be monitored. Each remote telemetry transmitter intermittently transmits short messages to 
the telemetry collection receiver. The remote telemetry transmitters are not connected to each other and 
do not receive messages back from the telemetry collection receiver. The remote telemetry transmitters 
transmit messages when they need to without any regard to other remote telemetry transmitters, as the 
remote telemetry transmitters are not synchronized with each other. Each remote telemetry transmitter 
1 5 comprises a transmitter identification (ID) code. 

Referring to FIG. 2, in accordance with the illustrative embodiment of the present invention, the 
remote telemetry transmitter 102-i includes a radio transmitter (transmitter) 200 including a reference 
frequency crystal oscillator 206 to produce a stable frequency on line 226, a time interval generator 202 
20 establishing a time base to produce pulses on line 228 activating the transmitter, a frequency 

synthesizer-modulator circuit 204 to produce a radio frequency carrier modulated by modulation data fed to 
the synthesizer via line 224 wherein the frequency of the carrier can be varied by programming to a desired 
value via plurality of lines 214, transmitter contt-ol logic 208 to activate and program the synthesizer- 
modulator circuit 204 via plurality of lines 214 when the logic is activated by a pulse from the time interval 
25 generator or by an abnormal signal indication on a sensor signal input 218, an amplifier 210 to amplify the 
radio carrier provided by the synthesizer when the amplifier is activated by the control logic 208 via line 
216, and an antenna 212 to radiate the power delivered by the amplifier. The control logic 208 includes a 
frequency and time data memory register 220 to hold information used to determine the time and the 
frequency of next transmission, and a sensor interface circuit 222 to accept the sensor signal and detect an 
' 30 abnormal signal condition, and to convert the sensor signal to a digital format suitable for transmission. The 
transmitter logic also includes a storage means 230 to store a transmitter identification number to 
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differentiate this transmitter from other transmitters. In addition, the transmitter logic includes a frequency- 
time sequence generator 400 as described later in details. The transmitter control logic, in some systems, 
can be realized based on a microprocessor, in some other systems, a specialized component may be used. In 
the illustrative implementation, the remote telemetry transmitter includes also one or more sensors or sensor 
5 interfaces 250 responsive to changes that are to be monitored and to produce appropriate signals at the input 
218. However, it should be apparent that such sensor can be an integral part of the transmitter or it can be 
external part or even a separate module. Furthermore, a part of the sensor may be integrated with the 
transmitter and another part of the sensor can be external to the transmitter. The signal at the input 218 can 
represent any measured or sensed effect: e.g., temperature, motion, sound, pressure, switch closure, 

1 0 presence of chemical substance, user input, etc. 

In operation, during the time between transmissions, the transmitter is in a standby mode in which 
the amplifier 210 and synthesizer-modulator 204 are not active and, preferably, the control signals turn off 
the power from these circuits in order to minimize the standby current of the transmitter. The transmitter 
control logic 208 is in a standby mode in which most of the circuits are inactive and some or most of the 

1 5 circuitry can be powered down with the exception of the circuits supporting critical functions; (a) the sensor 
interface circuit 222 that detects an abnormal signal condition and produces a binary signal that is logically 
combined with the signal on line 228 produced by the time interval generator so that when either a pulse or 
abnormal condition occurs the rest of the transmit logic circuitry is activated or powered up, (b) the 
frequency and time data memory 220 that has to retain the data during the period between transmission and 

20 consequently either it has to be a nonvolatile type or it has to be powered up during the period between 

transmissions. Upon activation, the control logic 208 determines the activation source by reading signal on 
line 228 and input 218. 

When the logic 208 is activated by a pulse, on line 228, from the time interval generator the 
following sequence of events occurs. First, the logic reads the frequency data memory and produces a data 

25 packet that includes the sensor status, the transmitter identification number and other data such as battery 
status. Then, the logic activates and programs the synthesizer-modulator circuit 204, activates the amplifier 
210 and sends the packet to the modulator via line 224. After completion of each transmission, the 
transmitter logic sets the tt-ansmitter in the standby mode until activated again by a pulse on line 228 or a 
sensor abnormal condition indicated on the input 218. 

30 In an advantageous embodiment the transmission of a packet can be repeated a predetermined 

number of times at separate frequencies, wherein the number of repetitions is chosen according to 
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application needs and, wherein the frequencies are determined by the transmitter logic according to an 
algorithm described later in details. This way, it is possible for the receiver to receive some repeated 
packets even if other packets are lost due to frequency selective fading caused by multipath or due to 
interference. 

5 When a sensor abnormal condition occurs, the sensor interface circuit 222 produces an active level 

of the signal indicative of the sensor abnormal level which activates the transmitter via a combinatorial logic 
circuit that combines the sensor abnormal level signal with the pulses from the time interval generator. 
When activated this way, the transmitter control logic 208 produces a data packet that includes the sensor 
status, then the logic activates and programs the synthesizer-modulator circuit 204, activates the amplifier 

10 210, and sends the packet to the synthesizer-modulator. The transmission may be repeated many times and 
the frequency for each transmission may be varied. 

After the transmission sequence is completed, the control logic disables the signal indicative of the 
sensor abnormal status so that an abnormal sensor status can not activate the control logic. Then, the 
control logic puts the transmitter in the standby mode until activated by a pulse from the time interval 

1 5 generator. When subsequently activated, the transmitter control logic performs the usual transmission 
sequence but the data packets include information that the sensor condition is abnormal if the condition 
persists. When the abnormal condition subsides, the signal indicative of an abnormal status is enabled so 
that a subsequent occurrence of an abnormal condition can activate the logic and trigger a new alarm 
transmission sequence; thus, normal operation is restored. 

20 

In the illustrative embodiment, the sequence in which frequencies are used is determined 
individually for each transmitter. The following is the description how this is accomplished. The frequency 
hopping sequence generator is based on a pseudo random sequence generator based on a linear feedback 
shift register, wherein some outputs of a shift register are fed to an EX-OR (Exclusive OR) gate whose 

25 output is connected to the shift register input. For a certain combination of the outputs that are fed to the 
EX-OR gate, the shift register can produce a sequence that has 2^-1 bits, wherein N is the length of the shift 
register. Such a sequence is called a maximum length sequence. Alternatively, if all the outputs of the shift 
register are taken at a time, then a pseudo random sequence of 2^-1 numbers is created, wherein all the 
numbers are N digits long and each number differs from all the other numbers in the sequence; the numbers 

30 range from 1 to 2^-1 . Such pseudo random generators are known to the skilled in the art. For example, a 
three-bit PN generator is based on a three-bit shift register with feedback taken from the first and the last bit. 
This register produces a repetitive sequence of seven numbers, wherein each number has three digits. The 
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numbers change from 1 to 7. The sequence repeats indefinitely with a period 2^-1, which for N-3 is equal 
seven. 

Referring to FIG. 3, the sequence generator 300 that can be used for determining frequency 
hopping (or time hopping) comprises pseudo random sequence (PN) generator 303, sequence permutation 
5 logic including EX-OR gates 306, 307 and 308, sequence selecting number (permuting number) input 301, 
and hoping sequence output 302. 

The pseudo random sequence generator 303 includes of a shift register 305 and EX-OR gate 304. 
The shift register 305 is composed of three stages 321, 322, and 323 having three outputs Qo 311, Qi 312 
and Q2 313 respectively. The feedback is taken from outputs Qo and Q2. The three least significant bits of 
10 the transmitter identification {'h, iu io} 301 are combined with the output of the pseudo random sequence 
generator {Q2, Qi, Qo} using EX-OR gates 308, 307, 306. The result can be used to indicate the frequency 
or frequency channel index {f2, fi, fo} 302 over which the transmission will occur. 

Assuming that the initial state of the shift register is binary 1 1 1 (decimal 7), the produced sequence 
is {7, 3, 5, 2, 1, 4, 6}. These numbers are then combined with the last three bits of the transmitter 
1 5 identification using bit by bit EX-OR operation; i.e. the last bit of the transmitter identification (io) is 

combined with the last bit of the random number (Qo), eta This way produced new sequence has numbers 
ranging from 0 to 7 the order of which depends on the last three bits of the transmitter identification. Thus, 
8 distinct (permuted) sequences of numbers are created. These sequences are used to select the transmission 
frequencies; each number represents an index (frequency index) used to select a frequency. For example, if 
20 the last digits of the transmitter identification are 000, then the frequencies are selected in the order {7, 3, 5, 
2, 1, 4, 6}, i.e. the sequence is not altered. If the last three digits of the transmitter identification are 001, 
then the frequencies are selected in the order {6, 2, 4, 3, 0, 5, 7}; if the last three digits of the transmitter 
identification are 010, then the frequencies are selected in the order {5, 1, 7, 0, 3, 6, 4}; etc. 

Note that, each such sequence repeats cyclically as the PN generator output repeats with a period 
25 2^-1 . The notation {7, 3, 5, 2, 1, 4, 6} means that the sequence of numbers as indicated is cyclically 
repeated. 

Notice, that one number is converted into "0" in the process of combining PN generator output with 
transmitter ID number thus, strictly speaking, the new sequences are not permutations of the original 
sequence. However, for the purpose of this application, this process is referred to as "permutation" and the 
30 resulting sequences as "permuted" as a convenient and adequate description. Notice also, that since some 
numbers are converted to zero during permutation process, the sequences collectively use 2^ numbers 
(frequencies) not ,2^-l . 
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If a longer shift register is used, longer sequences are generated using more frequencies. The 
sequence length increases exponentially with the increase of the shift register length. For example if the 
register length is 2-bits, the sequence length is 2^-1=3, e.g. the sequence is {1, 2, 3} before permutation with 
the transmitter ID bits; if the register length is 3-bits the sequence length is 2^-1=7 as shown above, etc. 

5 Preferably, a multiplicity of at least 128 frequencies are used as this is required by Federal Communications 
Commission to operate in certain frequency bands without a license. In the illustrative embodiment, an 8- 
bit shift register is used to produce sequences that use 256 distinct frequencies. Each number in the 
sequence actually represents an index based on which the actual frequency is determined. 

Notice, that each number in the sequence is different, le. each time the shift register state is 

1 0 changed, the resulting output number is also changed and each number is appears only once in the sequence. 
This is true regardless of the permuting bits used. 

Normally, the time intervals between transmissions are controlled by a quartz crystal and, ideally 
their nominal values are the same for all transmitters, however in an advantageous embodiment, the time 
1 5 intervals are perturbed by small time increments to ftirther randomize the transmission events and lower the 
probability of persistent collisions with other transmitters as well as avoiding an intentional or unintentional 
pulsed interference. The transmitter control logic 208 can accomplish this by programming the time interval 
generator 202 via line 227 (FIG. 2) according to a predetermined algorithm. The information about the 
current status of the algorithm may be included in the transmitted packet to aid the receiver operation. 

20 In an illustrative embodiment, the method of determining the time interval perturbation is based 

on a similar technique as described in conjunction with the frequency index generation. Le., each time a 
transmission is performed, a new number is generated and used to determine the time interval between 
the current and the next transmission. The time variations can be determined by processing the output of 
the PN generator used for the frequency index with bits of the transmitter ID code (preferably different 

25 from the bits used for frequency variations). Advantageously, the same PN generator outputs are utilized, 
thus making it easier to synchronize the receiver with the time variations. 

However, according to the illustrative embodiment of the present invention, the following 
method is used that not only provides for the time and frequency variations but also provides a great 
number of orthogonal frequency-time hopping sequences. 
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Referring to FIG. 4, the frequency index is produced by the PN generator 303 outputs 313, 312 and 
311 and transmitter ID bits 301 - {'h, ii, io} processed with EXOR gates 308, 307, and 306 to produce index 
digits 302 - {f2, fi, fo} as described previously in conjunction with FIG 3. The PN generator output is 
further processed with transmitter ID digits 402 - {15, 13} by the AND gates 408, 406 and 404 and by an 

5 EXOR gate 410. The output of the gate 410 taken one bit at the time is a shifted replica of the output of the 
PN generator eg. output 311 or 312 or 313, whose relative shift depends on the transmitter ID digits 402. 
The output of the gate 410 is then fed to a shift register 412 whose outputs 423, 422 and 421 are shifted 
replicas of the PN generator outputs 313, 312, and 311 respectively. When taken three digits at the time, the 
sequence produced at the output of the shift register is a shifted replica of the output of the PN generator. 

10 For example, if the PN sequence produced is {7, 3, 5, 2, 1, 4, 6}, and bits {is, 14, {3} are Oil then the shifted 
sequence is {4, 6, 7, 3, 5, 2, 1}; if the bits {is, u, h} are 101 then the shifted sequence is {2, 1, 4, 6, 7, 3, 5}. 
This way, a total of 7 shifted sequences are produced (000 input is not allowed). The shifted sequences are 
further processed with bits 420 - {ig, k} of the transmitter ID by EXOR gates 418, 416, and 414 to 
produce permutations of the shifted sequences at the outputs 433 - {tj, U, to} in a manner similar to the 

1 5 previously described in conjunction with frequency index generation. This way, each shifted sequence can 
be permuted in 8 different ways creating total 7*8=56 shifted-permuted sequences. The shifted and 
permuted sequences are used to produce variations of the time between consecutive transmissions. In the 
illustrative embodiment, the numbers from a sequence are multiplied by 

a ^47= TBT / P and added to the nominal time between transmission. Where, TBT is the nominal time- 
20 between-transmission and P is an arbitrary but rather large integer number. Advantageously P is a power of 



If the permuted PN sequences are used as frequency indexes and the shifted-permuted sequences 
are used to randomize the time between transmission, then there are created 8*7*8 = 448 sequences that are 
frequency-time orthogonal in the sense that if two sequences coincide at one frequency and time, they will 

25 not coincide for any other frequency and time for the entire PN generator period. This is based on merely 3- 
bit generator of the illustrative example! Of course, if a longer shift register is used for the PN generator, a 
far greater number of sequences are created. In the illustrative embodiment, an 8-bit generator is used as 
described previously. This results in over 16E6 orthogonal time-frequency sequences. Enough to relieve 
the manufacturer and applications fi-om transmitter ID code management other than sequential numbering of 

30 all manufactured transmitters. Of course, for a 8 bits shift register, 8 bits of the transmitter ID code are used 



two. 
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to obtain sequence permutation for frequency index, similarly, 8 bits are used for shifting and another 8 bits 
for permuting the shifted sequence to obtain the time delay variations. 

One advantage of this method is that in addition to two apparent dimensions of variability present in 
the form of permutations of frequency and time sequences, there is a third dimension added: i.e. the phase 
5 relationship variability between the fi-equency and time sequences. This rapidly increases a number of 

distinct orthogonal fi-equency-time sequences with increasing length of the basic PN generator as evidenced 
by the illustrative example. While it is possible to use other kinds of basic sequence and to use other ways 
of transforming the numbers of the basic sequence to obtain new sequences, the added new dimension has 
several advantages as evidenced in the illustrative embodiment. 

10 The permutation process as described is an example of a more general process of transformation 

that transforms a set of numbers into another set of numbers (that may differ in size). It should be 
apparent that although a transformation resulting in the permutation as described is advantageous, other 
transformations may be used to derive frequency-time pattern based on the described principle. It should 
also be apparent that in some implementations the order in which the shift and the second transformation 

1 5 (permutation) is performed may be reversed without altering the essence of the method. 

Another advantage of the illustrative embodiment is that the permutations and shifting of the 
sequences can be performed by processing (transforming) one number of the sequence at the time, thus 
eliminating the need to store and manipulate the entire sequence. I.e., the permuted or shifted sequence 
numbers are produced one at the time as needed based on numbers from the basic sequence that are also 
20 produced one at the time as needed. 

Note that this advantageous way of producing the frequencies does not require any overhead in 
the transmitted messages for the synchronization purpose. This is because the receiver can instantly 
recover the PN generator status based on just a single received message if the transmitter ID code is 
known. As described previously, the receiver can infer the status of the 8-bit generator based on the 

25 received frequency index and the transmitter ID code. I.e. the message contains the information about 
the 8-bit generator without explicit inclusion of the generator status bits in the message. In the 
illustrative embodiment, after the frequency index is obtained for a transmission, the time index is 
obtained by filling the shift register in the steps of storing the PN generator status, clocking the PN 
generator and shift register N times, and restoring PN generator status. This way, the content of the shift 

30 register 412 is not required by the receiver to obtain synchronization because the time index depends on 
the future content of the PN generator that can be easily duplicated in the receiver based on the present 
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content. Therefore, the receiver can still synchronize with a transmitter based on one received message 
and the message does not need to include any overhead for synchronization. 

In an alternative implementation, a second PN generator synchronized with the first PN generator 
may be used to produce the time variations wherein an information about the second generator phase may 
5 be included in the transmitted message to aid the synchronization. Equivalently, the receiver may 

compute the state of the second generator, based on the state of the first. Note, that synchronization of 
the first and the second generator in the transmitter is extremely important since the essence of the idea is 
that the cyclic shift of the second sequence is provided in respect to the reference provided by the phase 
of the first sequence. This way the resulting frequency-time hopping sequences produced in different 
1 0 transmitters are ensured to be distinct and orthogonal. 

Although, the described implementation based on a single generator is advantageous since it 
results in a simpler implementation and lower overhead leading to a longer battery life, the two generator 
implementation can be modified to ensure low overhead and provide additional benefits as follows. 

Both, first and second PN generators produce basic sequences whose length is 2^-1 and 2*^-1, 

1 5 wherein N and M are the lengths of the respective shift registers in both generators. In order to provide 
for synchronization between both sequences, each sequence is extended by one bit by inserting one "0" 
bit at a predetermined place in the sequence. The advantageous place is after N-1 or M-1 "0" bits in the 
respective sequences. This way the lengths become 2^ and 2^ respectively which ensures that both 
sequence lengths are related by a power of 2 (i.e. 2, 4, 8, etc.). Now, it is possible to ensure that both 

20 sequences are always in the same phase relation; e.g. after initial reset, which sets the generators in a 
predetermined state, both generators are advanced at the same time. This way, they will return to the 
exact initial state after the full period of the longer sequence. Of the particular interest is the case of the 
time generator producing a longer sequence than the frequency generator. In some applications, there is a 
limited number of frequency channels available, however there is still a need to produce a large number 

25 of frequency-time orthogonal sequences. In such case, a longer time sequence can be used to expand the 
number of possible frequency-time sequences. For example if the frequency generator shift register has 
N bits and the time generator shift register has M bits, then the total number of sequences is 2^ * (2^-1) * 
2^ as shown in the preceding examples. Each time M is increased by one, the number of frequency-time 
sequences is enlarged approximately by a factor of four resulting in a rapid increase of the number of 

30 sequences with the increase of the time generator shift register length. Also, the synchronization requires 
a small overhead because the receiver can infer the frequency generator state and needs only the state of 
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the time generator. However, if the time generator is in precise phase lock with the frequency generator, 
the transmitter does not need to send the actual time generator state. Instead, the transmitter needs to 
include the information to remove the uncertainty created by the time sequence period being multiple of 
the frequency sequence period. E.g., if the time sequence is two times longer, the receiver needs to 

5 know if the time generator is in the first half or the second half of the sequence to determine the exact 
state of the time generator. In this particular case, this information requires only one bit to be included in 
the transmitted messages. Of course, more bits are required if the time sequence is longer, e.g. if the time 
sequence is 4 times longer than the frequency sequence, two bits are required; for 8 times longer 
sequence 3 bits are needed, etc. 

10 The described method (with one or two generators) produce a large number of time-frequency 

orthogonal sequences in a simple and systematic way that enables the sequence selection by the 
transmitter ID and requires zero (or very small) overhead for synchronization. A system using a large 
number of time-frequency orthogonal sequences as described has an advantage of immunity to multipath 
fading, pulsed and frequency selective interference including intentional jamming, as well as low 

1 5 probability of self interference due to persistent collisions that may occur when two or more transmitters 
transmit messages on the same frequency and at the same time for a prolonged period. A large number of 
produced frequencies enables the manufacturer and the system operators not to be concerned with the 
management of sequences for all the transmitters. Instead, each manufactured transmitter can produce a 
unique sequence that can be easily replicated in the receiver based just on the transmitter ID code. 

20 It is to be understood that the random frequency selection as described above and the time 

perturbation can be used together or in separation to achieve immunity to collisions. Such obtained 
frequency-time hopping sequence may be in any combination of time and frequency variability, 
including: (a) a fixed frequency pattern for all transmitters and individual time perturbation patterns for 
each transmitter, (b) a fixed time interval between transmission or fixed time perturbation pattern and 

25 individual pattern for frequency selection for each transmitter, and (c) individual frequency and time 
variations that can be combined to enhance the system performance at the expense of complication. 

In the illustrative embodiment, both the transmission frequency and the time interval between 
transmissions are individually randomized for each transmitter by the transmitter ID code bits. 

It is also to be understood that the illustrated method and its components such as generators, 
30 registers, gates, etc., can be realized in various forms of hardware some of which may include application 
specific integrated circuit (ASIC), or software, or their combination. 
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Referring to Fig. 5, according to an illustrative embodiment, the receiver includes a wide band radio 
circuit 500 with antenna 502 and a digital processor 550 with receiver interface 110. The wide band 
radio circuit 500 contains RF (radio frequency) bandpass filter 504 to select desired band of frequencies. 
5 The filtered signal is fed to a low noise amplifier 506 and further to the mixer 508. The mixer mixes the 
selected band of frequencies with the local oscillator frequency//^ 510. The resulting signal 512 is further 
filtered by IF (intermediate frequency) filter 514 having essentially the same bandwidth as the RF filter 504. 
The IF signal is fed to a complex mixer 516 to be mixed with complex signal ef^^ 518. The resulting 
complex baseband signal 520 is filtered by a complex low pass filter 522 having bandwidth approximately 

1 0 half the bandwidth of the RF and IF band pass filters. Subsequently, the filtered signal is sampled by A/D 
converters 524 at the rate/5 chosen at least two times the Nyquist frequency of the sampled signal. Sampled 
complex signal x^(t) 528 is fed to the digital processor 550. The local oscillator frequencies 510 and 518 
can be produced using any well-known methods such as a suitable frequency synthesizer. As describe, the 
receiver is wide band. Le, it processes the entire band of interest that can contain a number of frequency 

1 5 channels, where each channel can carry a modulated frequency carrier. 

The complex sampled signal x^(t) 528 is fed to logic 580 performing FFT (Fast Fourier 
Transform) of the sampled signal. The sampling rate fs and the number of samples A'^ taken for the FFT are 
related and conveniently chosen to obtain frequency resolution two times greater than the number of 
channels in the processed frequency band. The FFT output represents iV frequency bins. Preferably, every 

20 other frequency bin of FFT is centered at the center of the transmission channels, and the alternative bins 
are centered between the transmission channels. This is accomplished by a preferred setting of the local 
oscillator frequencies/^ 510 and ef^^ 518 in addition to proper choice of sampling frequency /5 and FFT 
length K 

In addition, gating and windowing is applied before FFT is performed although this operation is not 
25 shown in the drawing. The windowing function is to smooth out the signal at the edges of the sample 
window. This is necessary to lower the common impairments in FFT processing, namely spectral leakage 
and spectral smearing. 

Gating has a different purpose in the illustrative embodiment implementation. Normally, in signal 
processing, the FFT is performed on samples and when finished, the next block of consecutive TV samples 
30 are taken for processing, etc. In the illustrative embodiment, when one block of A^ samples is converted, the 
next K-1 blocks are ignored and K-th block of N samples is processed, etc. This way only every K-th block 
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is processed by FFT. This serves the purpose of saving the amount of processing by a factor ofK and 
results in a lower cost and lower power consumption. 

In operation, the FFT performs periodic processing of the sampled signal and the resulting output 
582 is fed to the controller 690 further processing the FFT output to determine the power of spectral 
5 component in each frequency bin. A sudden power change detected on one or more frequencies may 
indicate that a new message (or messages) is being transmitted. The transmitted messages have a 
message preamble included in them in order to allow the receiver to acquire and synchronize. The longer 
the preamble, the less often the receiver has to perform FFT processing (larger JiT factor), however, the 
longer the transmitted message, the more battery energy is drained. The number K is chosen judiciously 
10 as a trade off between the speed of acquisition and message length as desired for a specific system 
design. 

The same signal x^ft) is fed to M frequency selective circuits in the digital processor 550. Only 
two frequency selective circuits are shown: circuit #1 540 and circuit #M 545, wherein circuit #1 consists of 
=C a complex mixer 552, a complex FIR low pass filter 558 and a demodulator 559, and circuit #M consists of 

1 5 a complex mixer 562, a complex FIR low pass filter 568 and a demodulator 569. The complex local 

oscillators signals e/^i^ 554 and ef^r^ 564 are designed using a technique commonly referred to as DDS 
=: (Direct Digital Synthesis), however in this case all the mixing is performed digitally and consequently, there 

;n is no need for a D/A converter to convert the digitally generated local oscillator signal into an analog signal 

! y as is commonly practiced with DDS. The resolution of the DDS oscillator is preferably chosen to be % of 

20 the transmission channel spacing. 
Q In operation, when the controller determines (in a way described above and further described in 

details below) that a transmission is taking place or is about to take place on frequency /, it directs one of the 
available frequency selective circuits to that frequency by appropriate programming of the DDS circuit. As 
shown in FIG. 5, circuit #1 540 is receiving frequency /, and circuit #M 545 is receiving frequency r. The 
25 FIR filters 558, 568 are narrow band multirate polyphase low pass filters. They have the same bandwidth 
that is related to the channel width and modulated carrier spectrum width and the resolution of the DDS 
synthesizer, le. the bandwidth is small enough to reject the adjacent channels but wide enough to pass most 
of the received modulated carrier spectrum. The demodulators 559 and 569 are conventional demodulators 
whose principle of operation and implementation depends on the modulation format used in the transmitters. 
30 In the illustrative embodiment, this operation is performed by a conventional DSP (Digital Signal 



- 16 of 29- 



Processor) that performs demodulation function for all circuits. The demodulated data of frequency / and r 
are sent to the receiver controller 690 via lines 560 and 570 respectively. 

The number of circuits M is chosen depending on the desired system characteristics and the number 
of simultaneous receptions to be preformed. 

5 Additional aspect of the implementation is related to the frequency drift of the transmitters and the 

frequency estimation for the local oscillators. Normally, the frequency drift of the transmitters can be quite 
large and comparable to the channel bandwidth. The receiver controller performs a frequency estimation of 
the detected signal using unique properties of the FFT. When FFT processes a signal containing a 
frequency component that is located between two frequency bins of the FFT, the power is shared between 

1 0 both bins, /.e., two FFT outputs indicate raise in detected power. The relative value of each output depends 
on the exact location of the carrier, and is higher when the carrier frequency is closer to the center of the 
frequency bin. Using this principle, the controller can estimate more precisely the carrier frequency and 
tune the DDS circuit appropriately ensuring that the signal is not attenuated or distorted by the FIR filter. 
The final frequency error compensation occurs in the demodulator in one of the conventional ways. 

1 5 Finally, the signals detected by the receiver as described above is further processed by the controller 

that can take further action including sending messages as required via receiver interface 110. 

It should be apparent that the FFT performs an improved function that is equivalent to the RSSI 
(Received Signal Strength Indictor) in conventional single channel receivers. The purpose of this improved 
multichannel RSSI is to easier and faster detect the transmitted carriers and obtain an acquisition and 

20 synchronization. 

In some situations, no additional mechanism is required to receive the intermittent messages from a 
multiplicity of transmitters that are not synchronized with each other and that transmit short burst messages 
at variety of frequencies with long time intervals between the transmissions. In many cases, however, it is 
advantageous to maintain simultaneous synchronization with all the transmitters, as described later in 

25 details, in order to improve the reliability of the transmission in an environment that is heavily polluted with 
pulsing interference or very strong constant interference that may result in excessive spectral leakage and 
smearing of the FFT. If the time and frequency of the future transmission is separately computed and 
updated in the receiver, the receiver tunes one of the frequency selective circuits to appropriate frequency 
just prior to the transmission to be. Thus the interference occurring on other channels and other time can be 

30 ignored. The multichannel RSSI function is to assist the controller with obtaining initial synchronization 
and to reacquire synchronization with transmitters with whom the synchronization has been lost. In 
addition, the improved RSSI can aid the receiver in faster detection and response to the alarm messages that 
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are transmitted at different (faster) time intervals than the usual supervisory messages. Also, the receiver 
with improved RSSI and equipped with tracking mechanism can perform well with fewer demodulators. In 
most practical situations, just one demodulator may be required, thus resulting in a simpler and less 
expensive receiver. 

5 

FIG. 6 illustrates the tracking mechanism in the receiver according to the illustrative embodiment. 
The control logic 690 includes: (a) a plurality of ID memory registers 634 to hold digital data 
indicative of ID numbers for each transmitter that belongs to the system, (b) a plurality of time memory 
registers 636 to hold digital data indicative of the time of the next transmission occurrence for each 

1 0 respective transmitter, and (c) a plurality of frequency memory registers 638 to hold digital data indicative 
of the frequency of the next transmission occurrence for each respective transmitter. The control logic 690 
includes also receiver timer 632 and frequency-time sequence generator 400. In the illustrative 
embodiment, the registers are organized such that an arbitrary register / 641 of the plurality of ID memory 
registers 634 associated with a transmitter whose ID number is «, is associated with register / 642 of the 

1 5 plurality of time memory registers 636 and register / 643 of plurality of frequency memory registers 638, 
wherein said registers 642 and 643 hold data associated with said transmitter n. 

In the illustrative embodiment, the time registers 636 hold numbers - time of next transmission - for 
each transmitter representing the state of the receiver timer 632 at the time the next transmission is due from 
20 a transmitter. 

In the illustrative embodiment, the frequency registers 638 hold, for all the transmitters, the state of 
the generator for producing frequency-time hopping sequences as previously described. If the 
synchronization is obtained with a given transmitter #n, the state the generator corresponding to that 
transmitter is identical with the generator in the transmitter #n. 

25 

In operation, the receiver control logic 690 sequentially compares the data content of the time 
registers 636 with the data content of the receiver timer 632 and if the transmission is due from a transmitter, 
the control logic programs the frequency selective radio receiver demodulator circuit by changing the local 
oscillator frequency 554 or 564 according to the data content in the frequency register 638 for this 
30 transmitter, attempts to decode the demodulated signal, changes the content of the time register based on the 
number representative of the time interval between the transmissions for this transmitter and changes the 
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content of the frequency register according to a predetermined algorithm for this transmitter. Le, the 
frequency and the time registers are updated each time a transmission is due regardless whether the packet 
was received successfully. The new content of the frequency register is determined according to the 
algorithm for the frequency use by the transmitters. This is accomplished by initializing the frequency-time 
5 sequence generator 400 included in the control logic 690 using the value stored in the frequency register, 
applying transmitter ID to the generator and clocking it to obtain the next frequency and time as described 
earlier. 

The new content of the time register is calculated based on the current content of the receiver timer 
and a number representative of the time between the current transmission and the next transmission for this 

10 transmitter, wherein said number is calculated based on the nominal value of the time between the 
transmissions and adjusted by the pseudo random perturbation performed according to the previously 
described algorithm. In addition, said number is corrected by a correction factor based on the measured 
difference between the transmitter time base and the time base of the receiver, wherein said difference is 
determined in a manner described later in details. In the illustrative embodiment, the numbers 

1 5 representative of the time base differences are stored in the time registers 636 separately for each transmitter 
and are independent from the numbers representing the time of the next transmission, i.e. the time registers 
are split to hold two independent numbers. 

It should be noted that even if crystal oscillators are used in the transmitters and the receiver to 
control the timing, the error accumulated during the time between transmissions may be significant 

20 compared to the transmission time. For example, if the period between the transmissions is 100 seconds and 
the crystal frequency error due to tolerance and temperature changes is +/-20 ppm (parts per million) for the 
transmitter and +/-10ppm for the receiver, then the error may be as large as 3ms. If the time for the 
transmission of one data packet (transmission) is 5ms, then the error is significant. In order to minimize 
the time error accumulated during the long time between the transmissions, the receiver can store the time 

25 difference between the ideal and the actual time of reception and use the difference to predict more 
accurately the next transmission time. For example, if the timer resolution is 0.3ms, then the next 
transmission time can be predicted with accuracy 0.3ms, providing that the temperature does not change 
appreciably over 100s period. This represents an improvement of an order of magnitude. I.e. the receiver 
can program its frequency 0.3ms in advance to each new frequency, examine it for the duration of the 

30 transmission, then program to the next frequency and so on. 

During the acquisition, when the time error is not known, the receiver needs to tune to the first 
frequency at least 3ms in advance. If during the next 6 ms no valid signal is present, the receiver programs 
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to the next frequency 6ms in advance and so on. To alleviate this acquisition problem, the receiver includes 
a frequency error detection means as described below^. 

When a transmitted carrier is detected, the receiver measures the relative frequency error of the 
carrier. The receiver does it in two ways. First, the receiver uses FFT outputs to estimate coarse error as 
5 described above. Second, the receiver obtains the more precise the frequency error value from the 
demodulator based on the principle described below. 

In the illustrative embodiment, the time base and the transmission frequency of a transmitter are 
derived from the same source. Likewise, the time base and receiver frequency of are derived from the same 
source in the receiver. Consequently, by knowing the frequency error between transmitter and receiver, the 
1 0 time base error can easily by calculated and compensated for. 

For example if the transmitted carrier is 900MHz and the measured frequency error is 9kHz, the 
frequency references in the receiver and the transmitter are off by lOppm. Consequently, the time base is 
also off by lOppm. If the nominal value of time between transmissions is 100s, then the timing error is 1ms. 
In the illustrative embodiment, the receiver compensates for the time base difference by adding or 
1 5 subtracting a correction value to the nominal value of the time between transmission. The correction value 
is obtained individually for each transmitter. 

Also, the obtained frequency error is stored to be used during subsequent reception of the signal 
from this transmitter. The stored error value is used to initiate the demodulator to ease the demodulator 
synchronization process. This lowers the requirements for the length of the preamble included in each 
20 transmission for the purpose of carrier and data timing acquisition. 

It should be stressed that in the illustrative embodiment of the receiver the time and frequency 
registers and the improved RSSI circuit work in harmony to obtain faster acquisition and better tracking. 
Although the receiver could operate with RSSI circuit alone or with the time and frequency registers based 
tracking apparatus alone, the combined action results in a more robust system and is therefore preferred. 
25 In operation, the receiver scans all the available for transmission frequencies by monitoring the 

outputs of the FFT and by tuning the frequency selective circuits sequentially to all the available for 
transmission frequencies during the time when they are not occupied with the scheduled reception from the 
transmitters. This is especially important whenever the tracking apparatus loses synchronization with one or 
more transmitters. If a transmitted carrier is detected, then the receiver determines if the transmitted 
30 waveform parameters are valid by detecting the data pattern in the message or other unique properties of the 
modulated carrier. If the parameters are not valid, the receiver will quickly proceed to examine the next 
frequency. This way, the scan of all available frequencies is fast, thus the synchronization can be regained 
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faster and more reliably because the receiver will not waste much of the time to examine very weak or 
spurious signals. 

In addition to robust performance, the precise time and frequency tracking, as described in 
5 conjunction with the illustrative embodiment, provides a means for authenticating the received messages. In 
the illustrative embodiment, the transmissions are discriminated based on the expected and actual time and 
frequency of transmissions, /.e., if a transmission is received from a transmitter at a wrong frequency or at a 
wrong time, it may be declared invalid. Here, a wrong frequency is defined as inconsistent with the 
expected frequency based on present position of the hopping sequence as computed in the receiver, and 

10 wrong time is defined as inconsistent with the expected time as computed in the receiver. In addition, the 
expected time computation may include a time error window based on cumulative effect of the maximum 
anticipated time error due to relative time base difference between the transmitter and the receiver, as 
described earlier Likewise, expected frequency may include the frequency error due to frequency reference 
difference and resulting difference between the transmitter and receiver frequencies, as described earlier. 

1 5 I.e., besides the hopping pattern there may be additional component, in frequency determination as well as 
the time determination, that results in a slight frequency offset and/or time offset that can be view as a sort 
of additional signature of a transmitter. 

The problem is that an attack can be constructed based on recording and playback of the transmitted 
messages. Normally, this is difficult because of the use of the frequency-time hoping, which, in addition, is 

20 different for each transmitter. Normally, the transmitted messages do not change often and even if they do, 
the receiver cannot verify if the change is introduced in the transmitter. In addition, if the transmitter ID is 
included in the transmissions and can be transparently received, it makes it easier for an attacker to 
determine the hopping pattern. Thus, in theory, it may be possible, although with difficulty, to record and 
play back transmissions (necessarily, at the right frequency and the right time) with the purpose of confusing 

25 the system receiver. The illustrative embodiment provides for further improvement of the system security. 
In the illustrative embodiment, there is provided an additional method for authenticating the 
received messages, which works in conjunction with the previously described method of discriminating the 
transmissions. Accordingly, the transmissions are encrypted, wherein the encryption key is varied for each 
transmission. The encryption key is varied based on the state of the frequency-time hopping generator. In 

30 the illustrative embodiment, the sequence of the encryption key changes is selected based on the transmitter 
ID and is different for each transmitter. In addition, the sequence is depended on a status of a counter 
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(implemented in the transmitter control logic), whose value is incremented each time the frequency-time 
hopping generator rolls over, i.e, once per the generator's period. 

In the illustrative embodiment, there is provided an additional method for authenticating the 
received messages, which works in conjunction with the previously described method of discriminating 
5 the transmissions. Accordingly, predetermined bits of data for transmission are modified by a modifier. 
The modifier is based on the state of the frequency-time hopping generator. In the illustrative 
embodiment, the modifier is used to modify bits of the transmitter ID (or its portion) included in the 
transmitted messages. The ID is known by the receiver. In addition, the modifier is used to modify bits 
of a counter value that are included in the transmitted messages. The counter (implemented in the 

1 0 transmitter control logic) is incremented each time the frequency-time hopping generator rolls over, i.e. 
once per the generator's period. In the illustrative embodiment, the modified data for transmission is 
further encrypted prior to transmission. 

Referring to FIG. 7, in the transmitter, data for transmission 702 comprises several fields 
including sensor status 702a, battery status 702b, counter value 702c and transmitter ID 702d. Selected 

1 5 bits of data for transmission 702 are modified by modifier 706 using bitwise EX-OR operation 708 

resulting in modified data 710. In the illustrative embodiment, the bits selected for modification include 
some or all bits of the transmitter ID 702d. The modified data is further encrypted and transmitted by the 
transmission process 716. The transmission process uses the frequency-time hopping as previously 
described. 

20 Modifier 706 is determined based on the state of the frequency-time hopping generator based on 

the method of generating frequency-time hopping sequences as described previously. This can be done, 
for example, by retrieving modifiers from a look-up table based on the generator state or by computing 
the modifier based on the state of the generator according to a predetermined algorithm. I.e., in the 
illustrative embodiment, the modifier is changed with each transmission and the sequence of changes is 

25 different for each transmitter. Counter value 702c is incremented periodically with a period equal to the 
period of the frequency-time hoping generator. The increment is applied each time the time-frequency 
hoping generator rolls over a predefined state. The use of the modifier, as described, ensures that the 
data for transmission varies for each transmission, and that the variations can be (1) undone and (2) 
verified in the receiver. This can be used in the receiver for the purpose of authentication. The use of the 

30 counter is beneficial if the frequency-time hopping generator is relatively short. In such case, without the 
counter, the data for transmission is allowed to repeat periodically with a period equal to the generator 
period, thus the system may be spoofed (although with considerable difficulty) by recording and playing 
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back a transmission at the right frequency and the right time. Of course, the receiver logic needs to track 
counter changes for each transmitter, this, however, is easy since the change is only once per the hopping 
sequence period. 

Other methods of ensuring verifiable variability of the data for transmission may be designed, 
5 however the method used in the illustrative embodiment is simple and efficient and requires little 

overhead in the transmission. Furthermore, the receiver can easily synchronize with the changes but only 
if the change method is known and the transmitter ID is known. 

To prevent the transmitted data to be read and analyzed by unauthorized persons, for example, in 
order to discover the transmitter ID or to read the telemetry data, the transmissions are encrypted. In the 
10 illustrative embodiment, modified data 710 is encrypted by encryption algorithm 714 using variable 

encryption key 712. The specific choice of the encryption algorithm depends on the tradeoff between the 
computational complexity and the desired protection. The variable key is determined based on the state 
=n of the time-frequency hopping generator, for example by retrieving keys from a look-up table based on 

the generator state or by computing the key based on the state of the generator according to a 
M 1 5 predetermined algorithm. In the illustrative embodiment, the key is varied for each transmission and the 
Zl sequence of variations is based on the transmission ID and is different for each transmitter. This way of 

H determining the variable encryption key has the advantage that the receiver can easily synchronize with 

U the changes but only if the change method is known and the transmitter ID is known. In the illustrative 

L^' embodiment, the key variation is also depended on the counter value 702c. This way, the period of 

n 20 changes can be arbitrarily increased if the time-frequency sequence generator period is not sufficient. 
Q During the initial synchronization, the receiver needs to try different values for the counter to 

generate the decryption key until successful. Subsequently, the receiver can replicate the counter value 
and increment it synchronously with a transmitter. Of course, the receiver logic needs to track the 
counter changes for each transmitter. 
25 In the illustrative embodiment, the receiver is equipped with a list of ID numbers for all 

transmitters from which the receiver is supposed to receive transmissions. During initial synchronization 
e.g. after transmitter or receiver power up, the receiver must try each transmitter ID number to 
synchronize with frequency-time generator. When this is accomplished, synchronization with key 
variations or modifier variations is simultaneously obtained "for free" since these variations are based on 
30 the state of the frequency-time generator. 

Note, that using different hopping frequencies for each transmitter is also beneficial for the initial 
synchronization process. For example, if two transmitters are added to the system and powered up, when 
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the receiver receives a portion of a transmission, it does not know from w^hich transmitter the 
transmission has been sent. The receiver can compute the next time and frequency based on both 
transmitter IDs. The receiver can then attempt reception at both frequency-time coordinates, which are 
different since the sequences are orthogonal. This concept can be of course extended to an arbitrary 

5 number of transmitters. 

Referring again to FIG. 7, in an illustrative embodiment, in operation, the receiver receives the 
transmissions using receive process 766 utilizing time-frequency hopping as previously described. 
Subsequently, the receiver decrypts the received transmissions using decryption algorithm 764, which 
utilizes receiver variable key 762. Receiver variable key 762 is produced in a way that is analogous to 

10 that of the transmitter's. The decryption results in modified received data 760 that is subsequently 

modified by the bitwise EX-OR operation 758 using receiver modifier 756. Modifier 756 is produced in a 
way that is analogous to that of the transmitter's. If the receiver modifier and the receiver variable key 
are right, the end result is the received data 752 comprising received sensor status 752a, received battery 
status 752b, received counter status 752c, and received transmitter ID 752d. 

1 5 The receiver can then validate the received massage by checking the received transmitter ID for 

consistency. Similarly, and in addition, if used and included in the transmission, the received counter 
status can be also checked for consistency. 

Note that numerous variations may be possible using the described methods. For example, in 
one embodiment, the modifier may be varied as described, while the encryption key is constant. In 

20 another embodiment, the modifier may be constant or even eliminated, while the encryption key is varied 
as described. In yet another embodiment, the data field 702c, comprising bits of a counter value, is 
extended to include bits related to the frequency-time pattern generator state. For example, if the counter 
has eight bits and the pattern generator has eight bits, there are 16 bits in the field 702c, and a value 
represented by all bits of the field 702c is changing with each transmission. In this case, a constant 

25 encryption key can be used and the modifier can be eliminated. The constant variable key can be the 
same for all the transmitters or, advantageously, it can be different for each transmitter. Of course, in 
each case the receiver operation should match the operation of the transmitters. 

The described method of authentication protects the system from fraudulent activities including 
sending a previously recorder valid message from a valid transmitter in order to confuse the receiver. 

30 Although illustrative embodiments of the invention have been described in detail herein with 

reference to the accompanying drawings, it is to be understood that the above-described embodiments are 
merely illustrative of the invention, and that the invention is not limited to those precise embodiments, and 
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that many variations may be devised by one skilled in the art without departing from the scope and spirit of 
the invention. It is therefore intended that such variations be included v^ithin the scope of the invention as 
defined by the appended claims. 
What is claimed is: 
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